Lucene search
+L

1903 matches found

Mend
Mend
•added 2017/10/30 2:00 p.m.•2 views

CVE-2015-3249

The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service out-of-bounds access and daemon crash or possibly execute arbitrary code via vectors related to the 1 framehandlers array or 2 setdynamictablesize function...

9.8CVSS0.05438EPSS
SaveExploits0References5
Mend
Mend
•added 2017/10/30 2:00 p.m.•2 views

CVE-2014-3624

Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT...

9.8CVSS0.03766EPSS
SaveExploits0References5
CVE
CVE
•added 2017/10/30 2:00 p.m.•81 views

CVE-2015-3249

The CVE-2015-3249 entry concerns Apache Traffic Server (ATS) 5.3.x prior to 5.3.1, where the HTTP/2 experimental feature is vulnerable. The underlying issue affects the frame_handlers array and the set_dynamic_table_size function, enabling remote attackers to cause a denial of service (out-of-bou...

9.8CVSS9.8AI score0.05438EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2017/10/30 2:00 p.m.•38 views

CVE-2014-3624

Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT...

9.8CVSS9.6AI score0.03766EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2017/10/30 2:00 p.m.•42 views

CVE-2015-3249

The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service out-of-bounds access and daemon crash or possibly execute arbitrary code via vectors related to the 1 framehandlers array or 2 setdynamictablesize function...

9.8CVSS9.9AI score0.05438EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2017/10/30 12:00 a.m.•1 views

PT-2017-5879

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server version 5.1.x before 5.1.1 Description: The issue allows remote attackers to bypass access restrictions by leveraging the failure to properly tunnel remap requests using the CONNECT method. Recommendations: For Apache...

9.8CVSS0.03766EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/30 12:00 a.m.•4 views

CVE-2015-3249: Improper Restriction of Operations within the Bounds of a Memory Buffer

The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service out-of-bounds access and daemon crash or possibly execute arbitrary code via vectors related to the 1 framehandlers array or 2 setdynamictablesize function...

9.8CVSS8.7AI score0.05438EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/30 12:00 a.m.•6 views

CVE-2014-3624: Improper Access Control

Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT...

9.8CVSS8.3AI score0.03766EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2017/10/11 12:00 a.m.•20 views

The vulnerability of the HTTP/2 module of the Apache Traffic Server allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the HTTP/2 module in the Apache Traffic Server exists due to improper handling of HTTP/2 requests. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of data...

10CVSS7.8AI score0.02411EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2017/10/11 12:00 a.m.•23 views

The vulnerability of the HTTP/2 module of the Apache Traffic Server allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the HTTP/2 module in the Apache Traffic Server exists due to improper handling of HTTP/2 requests. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of data...

10CVSS7.8AI score0.02411EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2017/09/19 12:00 a.m.•14 views

Unspecified vulnerability in Apache Traffic Server HTTP/2 experimental feature

Apache Traffic Server is the United States Apache Apache Software Foundation of an efficient , scalable HTTP proxy and caching server . An unspecified vulnerability exists in the HTTP/2 experimental feature in Apache Traffic Server versions 5.3.x prior to 5.3.2. No details of the vulnerability ar...

10CVSS6.8AI score0.02411EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/09/19 12:00 a.m.•18 views

Unspecified Vulnerability in Apache Traffic Server (CNVD-2017-34167)

Apache Traffic Server is the United States Apache Apache Software Foundation of an efficient , scalable HTTP proxy and caching server . A security vulnerability exists in the HTTP/2 experimental feature in Apache Traffic Server versions 5.3.x prior to 5.3.2. No details of the vulnerability are...

10CVSS6.8AI score0.02411EPSS
SaveExploits0References1
Prion
Prion
•added 2017/09/13 4:29 p.m.•27 views

Design/Logic Flaw

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168...

10CVSS9.3AI score0.02411EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2017/09/13 4:29 p.m.•34 views

Design/Logic Flaw

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5206...

10CVSS9.3AI score0.02411EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2017/09/13 4:29 p.m.•5 views

DEBIAN-CVE-2015-5206

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168...

9.8CVSS9.4AI score0.02411EPSS
SaveExploits0References1
NVD
NVD
•added 2017/09/13 4:29 p.m.•27 views

CVE-2015-5168

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5206...

10CVSS9.5AI score0.02411EPSS
SaveExploits0References1
OSV
OSV
•added 2017/09/13 4:29 p.m.•16 views

CVE-2015-5206

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168...

9.8CVSS9.4AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2017/09/13 4:29 p.m.•29 views

CVE-2015-5206

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168...

10CVSS7.2AI score0.02411EPSS
SaveExploits0References2
OSV
OSV
•added 2017/09/13 4:29 p.m.•9 views

DEBIAN-CVE-2015-5168

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5206...

9.8CVSS7.1AI score0.02411EPSS
SaveExploits0References1
OSV
OSV
•added 2017/09/13 4:29 p.m.•16 views

UBUNTU-CVE-2015-5206

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168...

9.8CVSS7.2AI score0.02411EPSS
SaveExploits0References3
Rows per page
Query Builder